Lucene search
+L

17436 matches found

Positive Technologies
Positive Technologies
added 2024/12/20 12:00 a.m.10 views

PT-2024-23746

Name of the Vulnerable Software and Affected Versions IntelR Processors affected versions not specified Description The issue is related to improper Finite State Machines FSMs in the hardware logic of some IntelR Processors. This may allow a privileged user to potentially enable denial of service...

8.8CVSS7.8AI score0.03047EPSS
SaveExploits1References170
NVD
NVD
added 2024/12/19 2:15 a.m.30 views

CVE-2024-51532

Dell PowerStore contains an Improper Neutralization of Argument Delimiters in a Command 'Argument Injection' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to modification of arbitrary system files...

7.1CVSS0.00265EPSS
SaveExploits0References1
CVE
CVE
added 2024/12/19 1:40 a.m.77 views

CVE-2024-51532

CVE-2024-51532 affects Dell PowerStore with a vulnerability described as improper neutralization of argument delimiters (parameter injection). The issue can be exploited by a low-privilege attacker with local access to modify arbitrary system files, tied to the PowerStore component handling comma...

7.1CVSS6.8AI score0.00265EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2024/12/19 1:40 a.m.36 views

CVE-2024-51532

Dell PowerStore contains an Improper Neutralization of Argument Delimiters in a Command 'Argument Injection' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to modification of arbitrary system files...

7.1CVSS0.00265EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/12/19 1:40 a.m.12 views

CVE-2024-51532

Dell PowerStore contains an Improper Neutralization of Argument Delimiters in a Command 'Argument Injection' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to modification of arbitrary system files...

7.1CVSS7AI score0.00265EPSS
SaveExploits0References1
OSV
OSV
added 2024/12/18 3:15 a.m.9 views

CVE-2024-47480

Dell Inventory Collector Client, versions prior to 12.7.0, contains an Improper Link Resolution Before File Access vulnerability. A low-privilege attacker with local access may exploit this vulnerability, potentially resulting in Elevation of Privileges and unauthorized file system access...

7.8CVSS5.8AI score0.00193EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/12/18 1:05 a.m.33 views

CVE-2024-47480

Dell Inventory Collector Client, versions prior to 12.7.0, contains an Improper Link Resolution Before File Access vulnerability. A low-privilege attacker with local access may exploit this vulnerability, potentially resulting in Elevation of Privileges and unauthorized file system access...

7.8CVSS0.00193EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/12/18 1:05 a.m.12 views

CVE-2024-47480

Dell Inventory Collector Client, versions prior to 12.7.0, contains an Improper Link Resolution Before File Access vulnerability. A low-privilege attacker with local access may exploit this vulnerability, potentially resulting in Elevation of Privileges and unauthorized file system access...

7.8CVSS6.7AI score0.00193EPSS
SaveExploits0References1
OSV
OSV
added 2024/12/17 12:15 p.m.11 views

CVE-2024-52542

Dell AppSync, version 4.6.0.x, contain a Symbolic Link Symlink Following vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to information tampering...

5.5CVSS5.8AI score0.00173EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/12/17 11:33 a.m.15 views

CVE-2024-52542

Dell AppSync, version 4.6.0.x, contain a Symbolic Link Symlink Following vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to information tampering...

4.4CVSS6.5AI score0.00173EPSS
SaveExploits0References1
CVE
CVE
added 2024/12/17 11:33 a.m.62 views

CVE-2024-52542

Dell AppSync 4.6.0.x is affected by a Symbolic Link (Symlink) Following vulnerability. The root cause is the mismanagement of symlinks that allows a low-privileged, locally connected attacker to tamper information. Impact is limited to information integrity (I: High; A: None; C: None per docs). N...

5.5CVSS6.3AI score0.00173EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2024/12/17 11:33 a.m.31 views

CVE-2024-52542

Dell AppSync, version 4.6.0.x, contain a Symbolic Link Symlink Following vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to information tampering...

4.4CVSS0.00173EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/12/17 12:00 a.m.12 views

PT-2024-35367 · Dell · Dell Appsync

Name of the Vulnerable Software and Affected Versions: Dell AppSync version 4.6.0.x Description: A low privileged attacker with local access could potentially exploit a Symbolic Link Symlink Following vulnerability, leading to information tampering. Recommendations: For Dell AppSync version...

5.5CVSS6.7AI score0.00173EPSS
SaveExploits0References5
NVD
NVD
added 2024/12/16 6:15 p.m.37 views

CVE-2024-12658

A vulnerability was found in IObit Advanced SystemCare Utimate up to 17.0.0 and classified as problematic. This issue affects the function 0x8001E01C in the library AscRegistryFilter.sys of the component IOCTL Handler. The manipulation leads to null pointer dereference. Local access is required t...

6.8CVSS0.0046EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
added 2024/12/16 5:31 p.m.18 views

CVE-2024-12658 IObit Advanced SystemCare Utimate IOCTL AscRegistryFilter.sys 0x8001E01C null pointer dereference

A vulnerability was found in IObit Advanced SystemCare Utimate up to 17.0.0 and classified as problematic. This issue affects the function 0x8001E01C in the library AscRegistryFilter.sys of the component IOCTL Handler. The manipulation leads to null pointer dereference. Local access is required t...

6.8CVSS6.7AI score0.0046EPSS
SaveExploits1References4
CVE
CVE
added 2024/12/16 5:31 p.m.66 views

CVE-2024-12658

CVE-2024-12658 affects IObit Advanced SystemCare Ultimate up to v17.0.0. The issue is in the IOCTL Handler’s AscRegistryFilter.sys, function 0x8001E01C, causing a null pointer dereference with local access required. Exploit details have been disclosed publicly; vendor did not respond. No patch/ve...

6.8CVSS5.5AI score0.0046EPSS
SaveExploits1References4Affected Software1
NVD
NVD
added 2024/12/16 5:15 p.m.39 views

CVE-2024-11358

Mattermost Android Mobile Apps versions =2.21.0 fail to properly configure file providers which allows an attacker with local access to access files via file provider...

5.7CVSS0.00123EPSS
SaveExploits0References1
CVE
CVE
added 2024/12/16 4:20 p.m.66 views

CVE-2024-11358

Mattermost Android Mobile Apps (versions

5.7CVSS5.5AI score0.00123EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2024/12/16 4:15 p.m.10 views

CVE-2024-12653

A vulnerability classified as problematic has been found in FabulaTech USB over Network 6.0.6.1. Affected is the function 0x22040C in the library ftusbbus2.sys of the component IOCT Handler. The manipulation leads to null pointer dereference. Local access is required to approach this attack. The...

5.5CVSS4.7AI score0.00376EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
added 2024/12/16 3:31 p.m.12 views

CVE-2024-12653 FabulaTech USB over Network IOCT ftusbbus2.sys 0x22040C null pointer dereference

A vulnerability classified as problematic has been found in FabulaTech USB over Network 6.0.6.1. Affected is the function 0x22040C in the library ftusbbus2.sys of the component IOCT Handler. The manipulation leads to null pointer dereference. Local access is required to approach this attack. The...

6.8CVSS6.7AI score0.00376EPSS
SaveExploits1References4
Rows per page
Query Builder